$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1076f349-4ed1-3f0d-9076-45e76c8a70db.roa File: 1076f349-4ed1-3f0d-9076-45e76c8a70db.roa (raw, json) Hash identifier: b/B17g0ruOkY9wRpeiS8mbseIA8ZBdQBivU2e01/PFw= Subject key identifier: 86:22:D3:0C:20:70:96:77:43:3A:2E:56:B3:03:F6:37:8C:C2:33:D2 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F4976E4989D9458F2718B7800 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1076f349-4ed1-3f0d-9076-45e76c8a70db.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3356 IP address blocks: 216.240.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:e4:98:9d:94:58:f2:71:8b:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c5894aeb-a626-461a-ad53-5dac8f02a735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9a:4e:47:d4:b0:0f:8e:c3:57:81:cc:dc:a2: 88:6b:77:9e:80:1c:b9:98:90:f5:69:39:34:9d:40: b9:78:c9:35:0f:b8:f8:08:bb:7e:42:3c:90:e8:98: 4d:f0:c3:72:14:72:47:3a:3f:7d:ad:99:d2:ec:85: 9f:a3:63:fd:ba:b3:c4:b0:1f:26:e5:97:89:99:a6: df:91:8c:eb:be:a9:84:15:63:27:5e:79:07:29:e2: 6d:11:c9:ca:e6:66:1f:5a:d8:1f:83:15:4e:39:33: cf:39:b2:10:2f:b7:ee:5d:fd:4f:8b:6e:3a:2f:cf: 70:ed:e4:48:e7:ac:6f:b4:d6:53:1b:5c:5c:5e:eb: 5e:d2:ba:1b:d3:9a:cb:4b:19:3a:17:0e:cc:9f:5f: 4b:e6:0e:f3:98:39:49:3f:f5:60:c8:bc:ef:6e:95: d0:16:96:c4:6f:7e:89:5f:0c:a8:79:0c:7b:ee:e4: 04:d2:a9:cf:d1:d3:56:7c:88:7a:b9:96:41:4d:20: 0e:32:41:d7:d3:86:56:13:85:b6:89:f3:ee:67:27: 2e:48:c1:04:be:2d:a9:ec:48:3b:f4:1a:e6:2d:02: c9:67:62:60:0d:93:4e:25:62:f4:78:71:6d:ba:0f: dc:6e:a0:c7:40:b3:5b:f2:1b:44:b4:bb:cf:2a:df: d0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:22:D3:0C:20:70:96:77:43:3A:2E:56:B3:03:F6:37:8C:C2:33:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1076f349-4ed1-3f0d-9076-45e76c8a70db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 216.240.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:b4:9c:fa:c1:28:7d:fa:2f:b9:b3:27:30:2e:4b:d5:29:32: 51:d9:fc:58:4a:4a:8e:0c:ac:84:bb:90:65:4d:17:5f:9a:ad: cd:c8:da:f0:6b:0b:20:6f:15:db:5c:9c:dd:ed:69:fe:20:87: 8c:92:82:8f:9f:c3:af:22:bf:ae:c8:01:f7:d0:5c:8a:88:cc: 0c:1f:e9:b7:6f:4c:71:b5:63:c1:d1:00:62:d5:12:bb:03:e5: 33:d7:6e:90:69:1f:08:80:e1:78:5a:4b:68:e8:b1:83:ee:7b: 4e:7a:c3:13:31:70:3b:51:5d:8e:71:a7:35:6c:c8:3a:8a:e9: 26:66:cf:1b:b0:87:d4:63:91:63:68:3f:79:3c:2f:7e:68:d0: 25:2b:66:8b:a2:40:0a:36:05:b6:32:a4:89:d0:c3:ae:c0:8c: 5a:70:fe:e5:bf:39:30:a0:f8:4b:22:27:1c:47:a3:d4:cd:0d: 30:8a:19:b1:94:3a:71:d6:4f:35:7f:66:0e:dc:cb:ca:cc:84: f7:32:e3:d1:3a:ce:0d:4c:7f:e9:2f:63:61:94:31:b8:53:0e: a9:f4:29:2d:ea:c7:34:b8:5e:3f:51:01:a7:a4:42:ec:26:e4: ec:a6:a7:1d:31:70:55:28:6b:12:27:b6:32:39:a4:cd:36:05: b8:14:72:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JduSYnZRY8nGLeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzU4OTRhZWItYTYyNi00NjFhLWFkNTMtNWRhYzhmMDJhNzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5pOR9SwD47DV4HM3KKIa3eegBy5mJD1aTk0 nUC5eMk1D7j4CLt+QjyQ6JhN8MNyFHJHOj99rZnS7IWfo2P9urPEsB8m5ZeJmabf kYzrvqmEFWMnXnkHKeJtEcnK5mYfWtgfgxVOOTPPObIQL7fuXf1Pi246L89w7eRI 56xvtNZTG1xcXute0rob05rLSxk6Fw7Mn19L5g7zmDlJP/VgyLzvbpXQFpbEb36J XwyoeQx77uQE0qnP0dNWfIh6uZZBTSAOMkHX04ZWE4W2ifPuZycuSMEEvi2p7Eg7 9BrmLQLJZ2JgDZNOJWL0eHFtug/cbqDHQLNb8htEtLvPKt/Q3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYi0wwgcJZ3QzouVrMD9jeMwjPSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTA3NmYzNDktNGVkMS0z ZjBkLTkwNzYtNDVlNzZjOGE3MGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABa0nPrBKH36L7mzJzAuS9UpMlHZ/FhKSo4MrIS7kGVNF1+arc3I2vBr CyBvFdtcnN3taf4gh4ySgo+fw68iv67IAffQXIqIzAwf6bdvTHG1Y8HRAGLVErsD 5TPXbpBpHwiA4XhaS2josYPue056wxMxcDtRXY5xpzVsyDqK6SZmzxuwh9RjkWNo P3k8L35o0CUrZouiQAo2BbYypInQw67AjFpw/uW/OTCg+EsiJxxHo9TNDTCKGbGU OnHWTzV/Zg7cy8rMhPcy49E6zg1Mf+kvY2GUMbhTDqn0KS3qxzS4Xj9RAaekQuwm 5Oympx0xcFUoaxIntjI5pM02BbgUclE= -----END CERTIFICATE-----Generated at Tue Sep 29 15:44:25 2026 by rpki-client